(12) INTERN ATlOj^^APPLlCATlON PUBLISHED UNDER THE PA^^ COOPERATION TREATY (PCT) 

(19) World intellectual Property Organization 
Iniemational Bureau 

(43) International Publication Date 

8 Mav 2003 (08.05,2003) PCX 




(10) International Publication Number 

WO 03/039155 A2 



(51) 
(21) 
(22) 
(25) 
(26) 
(30) 

(71) 



(72) 
(75) 



International Patent Classification': H04N 7/173 
International Application Number: PCT/JP02/1 1 126 
International Filing Date: 28 October 2002 (28-10.2002) 
Filing Language: English 
Publication Language: English 



Priority Data: 

2001-330827 



29 October 2001 (29.10.2001) JP 



Applicant (for all designated States except US): MAT- 
SUSHITA ELECTRIC INDUSTRIAL CO., LTD. 
|JP/J1^J; 1006, Oaza Kadoma, Kadoma-shi, Osaka 
571-8501 (JP). 

Inventors; and 

Inventors/Applicants (for US only): SHEN, Sheng 
Mei [SG/SG]; Block 20, Choa Chu Kang Street 64, 
#03-02 Windermere, 689093 Singapore (SG), JI, Ming 
[CN/SG]; Block 10, Geylang East Avenue 2, #02-09, 



389758 Singapore (SG). HUANG, Zhongyang [CN/SG]; 
Block 8, HoUand Avenue #20-30, 271008 Singapore (SG). 
TAN, Jek Thoon [SG/SG); Block 56, #02-30, Choa Chu 
Kang North 6, Yew Mei Green, 689577 Singapore (SG). 
SENOH, Takanori [JP/JP]; 1-24-8, Higashinakaburi, 
Hirakata-shi, Osaka 573-0093 (JP). 

(74) Agents: AOYAM.A, Tamotsu el al.; AOYAMA & PART- 
NERS, IMl^ Building, 3-7, Shiromi l-chome,Chuo-ku,Os- 
aka-shi, Osaka 540-000 1 (JP). 

(81) Designated States (national): AE, AG, AL, AM, AT, AU, 
AZ, BA, BB, BG, BR, BY, BZ, CA, CH, CN, CO, CR, CU, 

CZ, DE, DK, DM, DZ, EC, EE, ES, H, GB, GD, GE, GH, 
GM, fFR, HU, ID, IL, TN, IS, KE, KG, KR, KZ, LC, LK, 
LR, LS, LT, LU, LV, MA, MD, MG, MK, MN, MW, MX, 
MZ, NO, NZ, OM, PH, PL, PT, RO, RU, SD, SE, SG, SI, 
SK, SL, TJ, TM, TN, TR, TT, TZ. UA, UG, US, UZ, VC, 
VN, YU, ZA, ZM, ZW. 

(84) Designated States (regional): ARIPO patent (GH, GM, 
KE, LS, MW, MZ, SD, SL, SZ, TZ, UG, ZM, ZW), 
Eurasian patent (AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), 

[Continued on next page] 



(54) Title: APPARATUS OF A BASELINE DVB-CPCM 



< 

IT) 




Operator A 

With its usage rule and 
content protection format 



1.2 





CA1 


>1.3 


Interpret 

Protected content 
Using Method A 






i 


^1.4 



Content Decrypting 
and Decoding based 
on fomiat A 



DVB-STB 1 



Operator B 

with its usage rule and 
content protection fonnat 







^1.6 






CA2- 


-^1.7 


Interpret 

Protected content 
Using Method B 










"1.8 



Content Decrypting 
and Decoding based 
on fornnat B 



■DVB-STB 2" 



Operator C 

With its usage rule and 
content protection format 



1.10 



CA3 



1.11 



Interpret 

Protected content 
Using Method C 



1.12 



Content Decrypting 
and Decoding based 
on fornnat C 



■ DVB-STB 3 • 




BNSDOCIO: <WO 03039 155A2_I_> 



wo 03/039155 A2 lil^ lliililllliiliiliiliii^ 



European puicni (AT, BB, BG, CM. CY, CZ, DC, DK, liE, For hvo-letter codes and other abbreyiations. refer to the "Gitid- 

lis, H. 1-R, GB. OR, Hi, IT, LU, MC, NL, 1^', SE, SK, ance Notes on Codes and Abbreviations" appearing at the begin- 

TR), OAPl paieni (Bl% BJ, CF% CG, CI, CM, GA, GN» GQ, ning of each regular issue of the FCT Gazette. 
GW, ML, ^^R, NE, SN, Tl), TG). 

Published: 

— without international search report and to be republished 
upon receipt of tliat report 



030391 55A2 I > 



wo 03/039155 




PCT/JP02/in26 



DESCRIPTION 
APPARATUS OF A BASELINE DVB-CPCM 
TECHNICAL FIELD 

The present invention relates to content protection and copy management used 
in broadcasting, content distribution, Video-On-Demand, especially to such 
applications where the protected content is delivered, and transferred between 
devices which can consume the content and save the content in a storage in a 
secure manner. 

BACKGROUND ART 

Contents will be available easily to consumers as digital technology and media 
processing power become more and more advanced. Not like analogue media, 
digital media almost has unlimited number of copies with good quality. Thus as 
content owner, or content operator they will have much concern about the 
dangerous If content is not protected well. 

Digital TV (DTV) broadcasting has been widely deployed in the world. So far 
there is not much concern about the content protection and security. However 
as new generation DTV-STB (Set-Top-Box) thai has local hard disk and digital 
Interface like IEEE 1394, etc. is launched, content association, movie industries, 
and media owners are starting to worry about the content protection and copy 
management. Before having a complete and very secured DTV-STB, a secured 
content delivery and transfemng mechanism, as well as a secured transmission 
channel, they would not allow to release contents to such applications. 
Therefore many parties in the world including standard bodies like MPEG, DVB, 
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TVAnytime. content companies. CE (Consumer Electronics) manufacturers, as 
well as security technology providers, etc.. are gathering together to work on a 
both interoperable and secure end-to-end solution to the content protection and 
copy management in such application scenario. 

content distribution and video-on-demand is also becoming more and more 
demanding as multimedia data and contents can reach to anywhere and 
anytime. User is happy with the convenience and flexibility, and they can enpy 
entertainment easily and efficiently. 

on the other hand, content owners are trying to meet the customers needs but 
at the same time they also worry about the illegal usage of their property. There 
is a balance between two sides. 

,n MPEG standardisation group, people are working towards to standardise an 
IPMP (intellectual Property Management and Protection) system that involves 
compliant tem,lnal. All tl« tem,inals can play back a protected content that ,s 
encrypted and protected by following the same IPMP standard, no matter what 
kinds of IPMP tools they use. 

DVB consortium has also issued Call tor Proposal for CPCM (Content 
protection and Copy Management), to mainly focus on content delivery from 
operator to receiver and content transferring from one DVB^PCM device to 
another in a both secure and interoperable manner. 

The cun-ent DVB receiver as a DVB device cannot fulfil the both secure and 
interoperable requirement, especially for content transfening between DVB 
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receiver and other storage devices like PVR, etc., which has not addressed 
before. 

Basically the prior art for an existing DVB receiver is shown in Figure 1, to 
indicate how a content is delivered to DVB receiver in a secure but private way. 

Related invention is disclosed in Japanese Patent Application Nos. 2001- 
265908 and 2001 -058236 which are filed by the present applicant. 

To design an interoperable and secure device to be used in content delivery or 
transmission in a secure manner; 

To design an interoperable and secure device to be used in content transferring 
between such devices in a secure manner; 

In the above-mentioned cases, content is protected against illegal use of the 
property and granted usage is properly managed and carried from one device to 
another within authorised domain. 

DISCLOSURE OF INVENTION 

The device according to the present invention has the following elements. 

A means for using a standardized Baseline DVB-CPCM unit to be implemented 
in a compliant CPCM Device; 

A means for using sub modules of the Baseline DVB-CPCM, as well as their 
functions and behaviours; 
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A means for using a set of messages for content transferring, tool transferring, 
mutual authentication between compliant CPCM Devices, as well as interfacing 
with proprietary CPCM tools (plug-ins); 

A means for using a set of identifiers for content management and domain 
management; 

A means for using CPCM Information and their sub information which is carried 
in a content, as well as a set of syntaxes and their semantics for such 
information to indicate the format of a protected content where protection 
Information and content usage information are embedded. It is used by content 
provider or service operator as the standard mean to wrap up content with other 
information, and at the same time it is used by CPCM Device makers as the 
specification to build their compliant CPCM Devices. 

A means for using a unified and generic XML based schema to be able to 
express various kinds of usage rights and rules by different parties. 

According to a device of the present invention, the invention of Baseline DVB- 
CPCM solves the problem of protecting digital content from broadcasting, 
copying and/or transferring, and it provides good interoperability. 

The invented Baseline DVB-CPCM is the unit to be implemented in a compliant 
CPCM device, and it consists of five modules to realise most of the functions 
requested by security and interoperability. 
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CPCM Control Information and CPCM Stream are defined in to provide 
specification for both operator and manufacturer to follow to have world-wide 
inter-operability, It includes CPCM Tool List, Rights Holder, and Tool Container. 
5 In specifying a compliant CPCM Device, a Baseline DVB-CPCM is invented 
including CPCM Manager, Tools Box, Rights Management, Message Router, 
and CAS-CPCM converter, to fulfil most of the functions for content protection 
and copy management 

10 Messaging interface and several messages are defined here for content or tool 
transferring between CPCM Devices, as well as for interfacing with proprietary 
CPCM plug-ins. 

XML structured or binary rights language can be included in CPCM Rights Holder to 
1 5 provide usage rules associated with each content, program or even elementary streams. 

BRIEF DESCRIPTION OF DRAWINGS 

Figure 1 shows the prior art of an Existing DVB-STB to Receive Protected 
Content by using Different CA Systems. 

20 

Figure 2 shows the Invented DVB CPCM STB with End to End Solution. 

Figure 3 shows the Structure of CPCM protected content - MPEG2 system. 

25 Figure 4 shows Illustration of the Function of Rights Management used for End 
to End Solution in the Broadcasting Case. 
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Figure 5 shows Illustration of the Function of Rights Management used for End 
to End Solution in the content distribution case; 

Figure 6 shows Illustration of the Tool Retrieving Function of CPCM Manager. 
Figure 7 shows Content Transmission between CPCM Devices. 
BEST MODE FOR CARRYING OUT THE INVENTION 

In the present invention, a parameter named "authorized domain" is newly 
provided, which specifies one or more local networks. Only 
reproduction/recording devices within the local network specified by the 
authorized domain can be authorized to perform one of reproduction and copy 
of CPCM (content protection and copy management) protected content so that 
the content can be fully secured in transferring between the devices within the 
network. 

The authorized domain is defined when a user makes a contract of content 
subscription with a content provider. Terms of the contract may be varied 
according to characteristics of the local network such as numbers and/or types 
of the devices within the local network assigned the same domain. 

For example, the authorized domain can be set by adopting a part of an IP 
address of the device within the local network. More specifically, in the case of 
the device with an IP address "dvdplayer1.seno.drl.mei.co.jp", the authorized 
domain may be "seno.drl.mei.co.jp". Then, all the devices having IP address 
"seno.dri.mei.co.jp" can be authorized to perform one of reproduction and copy 
of the contracted content. Note that a domain specifies a logical unit of a 
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connection between the devices, wlnich are not necessary in the form of a 
network. 

The basic structure of the invention is first explained. 

(1) On the content provider or operator side in a CPCM environment: 

1 . Content is encoded using existing coding technology like MPEG-2 or 
MPEG-4, and encrypted using existing and defined encryption tools like DES or 
AES. Watermarks for copy control maybe embedded in the content before the 
encoding. The encryption key is encrypted again using pre-defined encryption 
tool, to result in an encrypted encryption key and the license key that is used to 
encrypt the encryption key. 

2 . At the same time, the ContentID is generated. 

3 . CPCM Tools List indicated by ToollD is also fomied based on what tool is 
used to protecting the content. 

4 . CPCM Rights Holder contains usage rights arid rules specified by content 
owner. These usage rights and rules can be made specific to each piece of 
content (by using of ContentID), or each program under one content (by using 
of programNumber in MPEG2 system), or even each elementary stream under 
one program (by using elementary_PID in MPEG2 system). The above- 
mentioned license key can be carried in CPCM Rights Holder, or it can be 
delivered to CPCM devices via some secure means, a return channel or smart 
card. 
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if necessary according to the detail 
5 CPCM Control Graph .s created if necessary 

protection and usage rules applied to deferent control point; 

3 e . CPCM TOO. container is .on.ed carrying necessary CPCM Tool in a 
protected format; 

lc.p«on Kev a.a any o^r con.o, on to. pro.ec.on, ^ as 

10 starr^PS. tool configuration messages, etc. 

jr, pqi in MPEG-2 system standard, 
All the above CPCM information .s earned .n PSI .n MPh 

and it is called CPCM Control Information. 
,5 (2) on the content receiver side in the same CPCM environment: 

DVB-CPCM unit will function by activating its sub modules: 



20 



25 



, „ ^ ,^es associated v«i the content are parsed. These inciu 

" : irerpro^ra., e,e.entarv strea., copy — n on whether 
usage rights of each progrc , ^ ^ rpCM devices in 

not the content (or a program) can he trans^-red ^t«een CPCM d 
..e same a«d domain. It the license Ke, ,s " J^^^^ 
Holder. It IS also retrieved after the Rights Management module maKes s.e 

... device has the .ght to access a par«cu,ar content or program. «not,^ 
„oense.eyisohtalnede,se.herethra^hasecuremeans,mavheasmartcard. 



BNSDOCIO <WO. 



.030391 55A2J_> 



•i 

WO 03/039155 PCT/JP02/11126 



2 . CPCM Manager module will retrieve CPCM Tool List and call up the tool 
indicated by ToollD in the list if there is such tool in Tools Box of Baseline DVB- 
CPCM. If there is no such tool in the case of a new tool or upgraded tool, 

5 missing tool downloading or retrieving will be conducted in three ways: sending 
ToolRequest to another CPCM Device; retrieving tools from the content (if there 
is tools carried in Tool Container Descriptor); remotely retrieving missing tool 
from a URL site. The newly obtained tool will be used as proprietary CPCM 
tools (plug-ins). 

10 

3 . In the case of playback only, the license key stored in buffer of Baseline 
DVB-CPCM will be called to decrypt the encrypted encryption key in the CPCM 
Stream. The reconstnjcted key will be used to decrypt the encrypted content 
one unit by one unit synchronously, to play back the protected content without 

15 content storing. 



4 . In the case of storing content on the top of playback, Usage rules and 
rights carried in the CPCM Rights Holder will be further retrieved and verified to 
see whether there Is copy right for this program or content. In the case of 
20 broadcasting, program number like ProgramNumber is used to identify the 
usage right applied to which program, while in the case of content distribution, 
ContentID will be used to identify the usage right applied to which content. 

After usage rule verification performed, the protected content will be played 
25 back in the same way as indicated in the above-mentioned playback case. At 
the same time the encrypted content will be saved in the storage of a CPCM 
device, together with CPCM information (CPCM Tool List, CPCM Rights Holder, 
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CPCM control Graph. CPCM Tool Contame, and CPCM Stream where the 
encryption key is not encrypted). 

(3) protected content transferring between two compliant CPCM Devices: 

It is assumed that the protected content stored in CPCM Device A. together with 
CPCM control Infomiation. CPCM Device B is owned by the same user and 
considered to be in the same authorized domain. 

10 in the case of content distribution, the same CPCM.DomainID conesponding to 
one registered user has been issued as a certificate and registered to all use^s 
CPCM devices when he makes subscription via a return channel, smart card, or 



15 



other means. 



This CPCM DomainlD as a certificate is securely transmitted, delivered, and 
registered into user's CPCM devices, or it is registered into use^s CPCM 
devices via a plug^n smart card. This CPCM.DomainID registered in Basel,ne 
DVB-CPCM of user's CPCM devices is used as Hardware's identifier or 
authorized domain identifier. 

A passwonJ assigned by the service operator may be used in this registra^on 
process All the bill for pay-per-view or content purchase will be charged to 
users based on their own CPCM_DomainlD and the password. All h,s 
registered CPCM devices are considered to be in the authorized domain wrth 
25 the same certificate of CPCM.DomainID. 

Wthin the same domain, ea* of the CPCM Devices Is also assigned a 
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CPCM_DevicelD to identify itself and to be used as address for messages 
sending and receiving between two CPCM devices. Each CPCM device will 
also have a key generation module to generate a pair of public key and private 
key to use to encrypt and decrypt the encryption keys in CPCM Stream. 

5 

When CPCM Device B wants to obtain a protected content/program which is 
stored in the CPCM Device A, it will send a ContentRequest message to the 
device A. together with: 

a ) the ContentlD/ProgramNumber of the requested content/program; 
10 b ) CPCM_DomainlD in the device B; 

c ) the public key — PublicKey on-line generated by (or previously embedded 
in) Baseline DVB-CPCM of the device B; 

d) the CPCM_DevicelD of the device B; 

15 The Baseline DVB-CPCM of device A receives the ContentRequest messages 
with the CPCM_DomainlD and the PublicKey, and it will verify: 

a ) whether device B is in the authorized domain. It is done by either doing a 
mutual authentication with Device B using certificates through mutual 

20 . authentication messages, or simply by checking the received CPCM__DomainlD 
against with its own CPCM_DomainlD; 

b ) whether there is such content/program with the ContentlD/ProgramNumber 
(programNumber is used in broadcasting case); 

c ) Whether there is such copy right for the requested content/program by 
25 calling the Rights Management Module to check the usage rules carried in 
CPCM Rights Holder. 

d ) If the above-mentioned three steps are passed through, the encryption key 
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carried by CPCM Stream which is stored in the device A, is encrypted by the 
received PublicKey and re-form a CPCiVl Stream attached to the protected 
content; 

e ) Finally the requested content will be transferred from the device A to the 
device B together with the CPCM information where some CPCM information 

may be changed; 

f ) If copy right is Copy Once in the CPCM Rights Holder, then Copy Once will 
be changed into Copy No More; 

g ) If the copy right information is carried in video embedded by watermari^ing. 
then a watermarking extracting tool will be called up from Tools Box to extract 
the copy right information. In this case if the copy right is Copy Once, then a 
watermarking embedding tool will be called up to embed Copy No More to the 
same video content; 

1 5 (4) CPCM tool transferring between two compliant CPCM Devices: 

It is assumed that CPCM Tools are stored In the module of Tools Box of 
Baseline DVB-CPCM in the CPCM Device A. 
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20 



25 



CPCM Device B receives a protected content and retrieves CPCM Tool ListBut 
when it is found that the tool required with ToollD is missing or cannot be found 
from the Tools Box of Baseline DVB-CPCM in the device B. the device B will 
send ToolRequest messages to the device A to request such tool, and the 
messages include: 

a) the CPCM_DomainlD of the device B; 

b ) the ToollD of the requested tool; 
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c ) the CPCM_DevicelD of the device B; 

CPCM Rights Management module in the device A receives the ToolRequest 
messages with the CPCM_DomajnlD and the ToollD, and it will verity: 

a ) whether device B is in the authorized domain. It is done by either doing a 
mutual authentication with Device B using certificates through mutual 
authentication messages, or simply by checking the received CPCM_DomainlD 
against with its own CPCM_DomainlD; 

b ) whether there is such tool with the ToollD, by looking up the tool table list 
stored in the local memory such as RAM which is inside the Baseline DVB- 
CPCM of the device A; 

c ) whether it is allowed for the tool to be transferred to another device even in 
the authorized domain, according to the transferring status for the requested 
tool; 

d ) If the above-mentioned three steps are passed through, the requested tool 
will be transferred from the device A to the device B, together with its 
transferring status; 

Embodiment 

A preferred embodiment of the invention will be described below with reference 
to the drawings. 

Figure 1 shows the prior art for the current typical DTV system, and DVB-STB 
with a private CA system is shown as the receiver here as an example. 
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In unit 1.0 Content Owner issues content to different operators with certain 
basic and common usage rules for the content; 

In unit 1.1 Operator A creates protected content using its tool and format 
5 although MPEG-2 standard is used here for audio, video and system encoding. 
The format of usage rules, the protection mechanism including protection tools 
used here, is based on a proprietary specification A. So a CA module in unit 1.2 
based on such specification B has to be used to attach to the DVB-STB 1. in 
order to be able to receive and interpret in unit 1 .3. and consume the protected 
10 content in unit 1 .4. 



The same way is applied to Operator B and DVB-STB 2. 

15 In unit 1.5 Operator B creates protected content using its tool and format 
although MPEG-2 standard is used here for audio, video and system encoding. 
The fomiat of usage rules, the protection mechanism including protection tools 
used here, is based on a proprietary specification B. So a CA module in unit 1.6 
based on such specification B has to be used to attach to the DVB-STB 2. in 
order to be able to receive and interpret in unit 1.7. and consume the protected 



20 



content in unit 1.8. 

The same way is applied to Operator C and DVB-STB 3. 

25 In unit 1.9 Operator B creates protected content using its tool and format 
although MPEG-2 standard is used here for audio, video and system encoding. 
The format of usage rules, the protection mechanism including protection tools 
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used here, Is based on a proprietary specification C. So a CA module in unit 
1.10 based on such specification C has to be used to attach to the DVB-STB 3, 
in order to be able to receive and interpret in unit 1.11, and consume the 
protected content in unit 1.12. 

5 

It is shown from the above mentioned situation, if DVB-STB 1 wants to receive 
and consume contents delivered by Operator B and C besides Operator A, user 
of DVB-STB 1 has to buy more than one CA systems which may cause much 
more than what user is not willing to pay. 

10 

On the other hand it is also not possible for such DVB-STB to fulfil secure 
content storing and secure content transferring between different devices by 
carrying the same usage rules. 

15 Furthermore there is no any compatibility among all the existing CA systems, so 
that the cost for having the same DVB-STB be able to receive and consume 
contents from as many as operators would be very large to consumers. 

As new generation DVB-STB would have local storage embedded in the STB to 
20 not only receive but also store received content. Besides that, content 
transferring between such devices including Personal Video Recorder (PVR) 
would become demanding. So it is necessary to define a new DVB device to 
realise both interoperable and secure content delivery and transferring from end 
to end and also between such devices. 

25 

End-to-End Solution 
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eased on «s Invention, a .u.. co.p.lan. DVB CPCM 3TBJ« -.>na 
Basenne DVB-CPCM Module ma. Is pre-l.plen.n.ea or embedded ,n a DVB 
STB, shown as in Figure 2. 

^ nvR rPCM STB with the invented Baseiine 
An end to end solution based on DVB CPCWl b i b 

o Th*. Baseline DVB-CPCM is specified. 
DVB-CPCM is illustrated in Figure 2. The Basehne U 

^ loc rPCM Manager, Tools Box, Rigms 
•,nc.ud-,ng Its sub-funcSon modules. CPCM M g 

Management Module (Usage States . Rules Parser , <='^^^^^'=;" 
between a private CAS (ECM . EMM) and CPCM Usage States . Rules, 
, well as Message Router which transmits all necessary messages. 

P,gure3,t.es.ruct^o,MP.G-2conten.protectedbvCPCMsvstem,sshown. 

c ^ a CPCM protected content v«ll contain CPCM Control 
^3 Shown ,n l Ust, CPCM Right Holder and CPCM Too, 

„ -nformation ,n.u ng CPCM Too . ^^^^^ ^^^^^ 

container, as well as CPCM „ 
PSI (Program Service Information) .n MPEG-2 system, wn. 
carried as a specific elementary stream. 

^ Thereare.wopossi«eUseCases,ortheaboveDVBCPCMSTB. 

case content Is protected and managed t,y the standardized DVB 



1) In 
CPCM system: 



A H «nd encrypted with certain usage rules, and 

25 Content will be encoded and encryp 

•« w «,»h other usage information that depends on user 

distributed/transmitted with otner u5,<*y 

subscription, to DVB CPCM STB. 
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Here since all elements, like encryption tool, and usage rules encoding, are 
based on the CPCM system, so Baseline DVB-CPCM, which is embedded in 
the STB will call up the decryption tool in the Tools Box, parse the usage rules 
5 by Rights Management Module, and then process the protected content. 

The encryption key is encrypted again and carried in a CPCM Stream. The key 
used to encrypt the encryption key, i.e., license key is either carried in Rights 
Holder, or made known to the DVB CPCM STB in some secure way, either via 
10 smart card, or via a return channel like modem line. 

Rights Management module in the invented Baseline DVB-CPCM of a 
complaint CPCM device will act for the following functions, as shown in Figures 
4 and 5. 

15 

In the Figure 4 for the case of broadcasting, the protected content with Its 
CPCM information is passed to Rights Management (RM) module in the unit 1, 
and CPCM Rights Holder will be retrieved in this module. Usage Rules and 
possibly the license key are carried in the CPCM Rights Holder. 

20 

In the first step in the unit 2 as shown in Figure 4, RM checks the content 
carried in CPCM Rights Holder against the CPCM_DomainlD which user is 
entitled to receive and has registered into user's CPCM device, to verify 
whether this device is eligible to consume the content. 

25 

• If the above result is negative, then the RM will generate an output message 
saying: you are not authorized, as shown in unit 3. 
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• If the above result is positive, then the RM will retrieves the license Key either 
from Rights Holder or smart card in unit 4 to be ready for decrypting the 
encrypted encryption key which is carried in the CPCM Stream. 

5 

In the next step, the RM will check user's request or preference between Play or 
Play & Copy in unit 5. 

• In the case of "Play only" requested by user, the retrieved License Key in unit 
10 4 will be passed to unit 8 for decrypting the encrypted encryption key. The 

following step is to de-scramble the protected content in unit 9 and playback the 
content in unit 10. 

• In the case of Play & Copy request by user, the RM will retrieve the Usage 
15 Rules in unit 6 to verify whether there is copy right to save the current content 

(or program in broadcasting case) in the storage in the complaint CPCM device. 

• If the above result is negative, then the RM will generate an output 
message saying: Copy/Move is prohibited, as shown in unit 7. 

20 

• If the above result is positive, then the retrieved License Key in unit 4 will 
be passed to unit 8 for decrypting the encrypted encryption key. The following 
step is to de-scramble the protected content in unit 9 and playback the content 
in unit 10. At the same time, in unit 11 the reconstructed encryption key is 

25 saved in Rights Management module for later use. The protected content is 
stored in local storage in the CPCM device in unit 12. 



BNSCOCID- <WO 03039155A2J_> 



wo 03/039155 PCT/JP02/1 1 126 

19 



In the Figure 5 for the case of content distribution, the protected content with its 
CPCM information Is passed to Rights Management (RM) module in the unit 1 , 
and CPCM Rights Holder will be retrieved in this module. Usage Rules and 
possibly the license key are carried in the CPCM Rights Holder. 

5 

In the first step in the unit 2 as shown in Figure 5, RM checks CPCM_DomianlD 
carried in CPCM Rights Holder against the CPCM_DomianlD which has 
registered into user's CPCM device, to verify whether this device is in the 
Authorized Domain and is eligible to consume the content. 

10 

• If the above result is negative, then the RM will generate an output message 
saying: you are not in authorized domain, as shown in unit 3. 

• If the above result is positive, then the RM will retrieves the license Key either 
15 from Rights Holder or smart card in unit 4 to be ready for decrypting the 

encrypted encryption key which is carried in the CPCM Stream. 

In the next step, the RM will check user's request or preference between Play or 
Play & Copy in unit 5. 

20 

• In the case of "Play only" requested by user, the retrieved License Key in unit 
4 will be passed to unit 8 for decrypting the encrypted encryption key. The 
following step is to de-scramble the protected content in unit 9 and playback the 
content in unit 10, 

25 

• In the case of Play & Copy request by user, the RM will retrieve the Usage 
Rules in unit 6 to verify whether there is copy right to save the current content 
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(or ^ogram in broadcasting case) in «,e storage in me cor^plaint CPCM device. 

. K me al»ve result is negative, then me RM will generate an output 
„,essage saying: Copy/Move is prohit»ted, as shown in unit 7. 

. „ me above result is positive, then me retrieved License Key In unU 4 will 
be passed to un« 8 tor de^Pting the encrypted enc^ption Key. The « 
step is to de^an^le the protected content in unit 9 and piaybacK me eonten, 
,„ ,0 At me same time, in ^ 11 the reconstructed encryption key ,s 
saved in Rights Management module ..r later u^. The p^tected content ,s 
stored in local storage in me CPCIVI device in unit 12. 

ngure 6, it is shown how CPCM Mar«ger retrieves a tool, and obtains a 
missing tool in different ways. 

' AS in Figure 6, CPCM Tool Ust is passed to CPCM Manager module in unit 1 to 
retrieve me requested tool. ,n unit 2 Tools Box will be looKed up to search^ 
..e requested tod. « me requested tool exists In me Tools Bo>. me too. w ^ 
activated tor functioning in unit 3. Omeovise me CPC^A Tool Container w„l be 

20 checl^ed if it exists, shown in unit 4. 

„ the requeued tool can be ft,und in t«it 4, men me too, will be retrieved trom 
.he CPCM Tool container and saved in me Tools Box in ^ S. Omen«,se me 
^quested tool will be obtained from anomer CPCM device by sendng a request 
25 message in unit 6. 

„ me tool request is accepted, men tl« tool will be transferred over and saved 
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in the Tools Box in unit 7. Otherwise the reply message will tell the reasons for 
the failure in unit 8. 

In unit 9 a CPCM Plug-in module will be checked to see if there is such 
requested tool to use. If no, the requested tool has to be retrieved from remote 
side via a return channel, URL, or other means in unit 1 1 . 

2 ) In the case content is protected and managed by a private CAS system: 

Content will be encrypted by control word in an ECM, and transmitted with their 
own format of EMM, to DVB CPCM STB. 

Since ECM and EMM are based on the private format of the CAS system, so a 
corresponding private CAS module is required in the DVB STB to decrypt and 
process the protected content. 

As shown in Figure 2, a CPCM plug-in module (CAS-CPCM converter), such as 
Smart Card with DVB compliant Common Interface (CI), is provided by the CA 
vendor to receive and playback such content. 

Communications between a CAS-CPCM converter module and the Baseline 
DVB-CPCM module in the compliant CPCM device is realized across a DVB 
compliant Common Interface (CI). CAS is Conditional Access System. 

Next, mapping between CA system and Baseline DVB-CPCM for Storage is 
described. 
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,n the case . the content is just for playback, there Is no necessity to conduct 
.appino. However, in the case it the content is .ranted to store in the DVB 
CPCM STB for future transferring in the authoring doma.n. a CAS-CPCM 
converter module with DVB compliant Common Interface (C.) is required to map 

Rules. Besides mapping usage rules, the content also needs to be decry^ed 
by the private CA system, and then be encrypted again by the Baseline DVB^ 
CPCM to store in the STB in an encrypted form together with their OPOU 
control information (CPCM Tool List. CPCM Rights Holder, etc) as well as 
CPCM Stream to hold the encryption key and other relevant information. 



The following table shows the Functions 
for the end to end solution. 



of Each Modules Illustrated in Figure 2 



Table i:FurKtionso^^^ 



Module Name 



Operator/Server Side _ 
Rights Authoring Tool 



Functions 



Editing of XML based Usage Rules and converting it 
into Binary format 




Watermarking Tool 
MPEG-2 Encoder 



CPCM Control 
Information Encoder 



Creating MPEG-2 compliant AudioAAideo/System 

streams 



Creating CPCM Tool List. CPCM Rights Holder 
Descriptor, CPCM Tool Container. CPCM Control 
Graph 
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CPCM Tools 


Encrypting a stream, hashing of CPCM Control 
Information, etc. 


Usage States &. Rules 


Selecting and encoding usage rules based on 
user s suuocnpiion ana Liomainiu, eic. 




tncrypiing ine encrypiion Key lo generate ukuivi 

OLi^ctlil. \^L{lt;i If IIUi 1 1 1callUr 1 liiaL a v^r OIVI LUUi neeUS 

can also be put in CPCM stream with proper 
timestamp. 


Prix/ate HAS 


^pcjiouon OT any proprieiary v-rM sysiem. 


Receiver/Client Side 






M oianaarQizea unu consisting ot several sud- 
modules that does CPCM functions in a compliant 


CPCM Manager 


Managing tools box, parsing tool list, retrieving 
CPCM tools; Content and Domain management; 




nuiuing an exisiing x^r^y^ivi i oois, 
Performing CPCM Tools function; 


Rights Management . 


Parsing Binary (XML optional) based Usage Rules 
warned in rvigncs noiaer uescripior, anu controls ine 
consumption or copy of content. 


Message Router 


A conceptual entity within Baseline DVB-CPCM that 
provides Messaging Interface between proprietary 
CPCM tools or comoliant CPCM Devices 


CAS-CPCM converter 


Conversion of Proprietary CAS Usage Rules into 
CPCM Usage Rules (CPCM Rights Holder 
Descriptor) across DVB Common Interface (CI), Re- 
Encryption, forming of CPCM Stream. 
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Next, Baseline DVB-CPCM used in Transmission between CPCM Devices is 

described. 

Transmission between t«o compliant CPCM devices is realized through a 
standardized Baseline DVB-CPCM module Message Router that ,s pc^ 
implemented in all CPCM devices. The communication is through messaging 
interface to provide interoperability, as shown in Figure 7. 

Wtessages via Message Router (MR) provide the following transmissions 
between CPCM devices: 



15 



20 



.. Content transferring from one to anotl:ner; 
• CPCM Tool transferring from one to another, 



The following identifications are def^ to use for content management and 
user database management during content transfemng and nghts 



autlientication. 

T,«» , Parameters defined for CgrjentTransferring in Authorized Domain 


IDs defined for Content 
Management and 
Authorized Domain or 
User Database 
Management 


Definition and Usage 


ContentID 


An identifier assigned to each content for 
rontent management . ! 
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CPCM_DevicelD 


An identifier assigned to each CPCM 
compatible device to use as address for 
senaing anu receiving mossages. 


CPCM_DomalnlD 


An identifier may obtain from Operator upon 
user registration and used for several CPCM 
Devices in tine same Authorized Domain. 



It is assumed that an encrypted content is stored in CPCM Device A with CPCM 
Rights Holder containing its Usage Rules and the encryption key. 

5 1 ) Content Request Message Sending from CPCM Device B to CPCM Device 
A 

Now CPCM Device B sends message via Message Router to request certain 
content with the ContentlD/ProgramNumber or possible elementary PIDs, as 
10 well as Its CPCM_DomainlD. Besides these parameters. CPCM Device R also 
generates one pair of keys and sends the PublicKey together with the above 
parameters to CPCM Devine A shown as in table 3. 



Table 3 Content Request Messages 



Messages 


Length 


Notes 


ContentlD/ProgramNumber 


4 bytes 




CPCM_DomainlD 


4 bytes 




PublicKey 


16 bytes 





15 

2 ) Verification - Mutual Authentication 
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Then, the CECMJ^^vi^ receives this message with all the parameters, 
searches ContentlD/ProgramNumber in the storage, and venf.es 
CPCM DomlanlD against its CPCM.DomianlD by CPCM Rights Management 
module in the Baseline DVB-CPCM. At the same time it checks the usage rules 
for the requested content/program, and finally grants copy or move nght by 
sending a reply message to CPCM_Device_B. 



15 



The reply message 



format is shown in Table 4. including error reporting. 



Tnhip A ppcpnnsfi Messaae for Content Request 




Reply Message & 

P.ndes 


Error Reporting 


Note 


No 


00 


No such content. 




No 


01 


You are not in the authorized 
domain. ^ 




No 


10 


Prohibit in Copy/Move mode 




Yes 


1 11 


Transferring is allowed 





3 ) on-line Encryption for the Encryption Key to create CPCM Stream 

After finishing the above Rights Authentication, the encryption key stored 
together with the content in CPCM Device A, will be encrypted by the PublicKey 
received from QPOM P^viQe-B to form a CPCM Stream. 



4) 



Content Transferring from CECMiMfi^ to ilEIMDsYise^ 



20 
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Now the requested content, together with Usage Rules (may changed) and the 
formed CPCM Stream, is transferred from CPCM Device A to CPCM Device B 
securely via secured channel. 

5 5 ) Tool Transferring Between CPCM Device A and CPCM Device B 

CPCM Manager in CPCM Device B retrieves CPCM Control Information carried 
in PSI of MPEG-2 TS stream to obtain CPCM Tool List. CPCM Manager 
checks the CPCM Tool List against with Tools Box in CPCM Device B , and 
10 cannot find the Tool indicated by ToollD. This may happen for the case where a 
new or upgraded CPCM Tool is used but the CPCM Device B does not 
implement. 

In this case CPCM Device B has three ways to obtain the missing CPCM Tool. 

15 

a ) CPCM Device B sends Tool Request Message to CPCM Device A via 
Message Router, to request the Tool with the ToollD. At the same time it also 
sends its CPCM_DomainlD to CPCM Device A. The Tool Request Messages 
format is shown as in Table 5. 

20 



Table 5 Tool Request Message Format 



Tool Request Message 


Length 


Note 


ToollD 


2 bytes 




CPCM_DomainID 


4 bytes 





CPCM Device A receives the Tool Request Message, it may choose to do a 
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mutual authentication with Device B, and checks Tools Box with the ToolID 
the transferring permission status as shown in Table 6. 

Table 6 Tool Description In a Tools Box of CPCM Device 



Tool ID 


Num 
ber 


Function 


oource 


Status for 
Transferring 


00000001 


1 


Encryption 1 


"'re-lmpiemenieu 


No 


00000002 


2 


Encryption2 


Pre-implemented 


No 


00000004 


4 


Encryptions 


■^re-impiemeniea 


T Cf o 


00000006 


6 


Digital Sign 


Pre-implemented 


Yes 


000000010 


10 


Watermarking 
Embedding 


Pre-i mpi emeniea 




00000001 1 


11 


Watermarking 
Embedding 


rre-impiemenieu 


Yes 


1 nnnnnnm*? 

1 UUUUUuu 1 ^ 


1 ^ 


WatermarkinQ 
1 Detection 


Pre-implemented 


Yes 


000000020 


20 


Encryption20 


Loaded from CPCM 
Device 


Yes 


000000021 


21 


Encryption21 


Loaded from Content 
Stream 


Yes 


000000022 


22 


Encryption22 


Loaded from Plug-in 
module 


Yes 


000000023 


23 


Encryption23 


Loaded from Remote 
URL 


Yes 



If the status is yes. then CPCM Device A will send reply to CPCM Device B, 
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followed by sending the Tool with its associated description to CPCM Device B. 

b ) As shown in table 6, the missing tool also can be retrieved from the content 
stream carried in CPCM Tool Container; 
5 c ) As shown in table 6, the missing tool also can be obtained from another 
CPCM device; 

d ) As shown in table 6, the missing tool also can be retrieved from the remote 
URLs via a return channel or other means, which is out of this scope of the 
proposal; 

10 

Next standardized components in the baseline DVB-CPCM is described. 

Those function modules used in a Baseline DVB-CPCM are listed in the Table 7 
15 below. 



Table 7 Function Module of Baseline DVB-CPCM 



Module Name 


Function Description 


Suggestion 


1. CPCM 
Manager 


Content Management 
Authorized Domain Management 
CPCM Control Information Retrieval 
(Tool Ust; CPCM Rights Holder, Tool) 


normative 


2. Tools Box 


Holding CPCM Tools and their 
Description 

Performing Tool's Function 


normative 


3. Rights 
Management 


Parsing Usage States & Rules (from 
Rights Holder Descriptor in CPCM 


normative 
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4. Message 
Router 



Control Information) and Storing them 
in a secure table with its ContentlD 



10 



5. CAS-CPCM 
converter 



Providing message interface to 
CPCM devices; Routing messages 
between proprietary CPCM tools 
(CPCM plug-ins) and device; Routing 
messages between CPCM devices. 
Transcoding Proprietary Usage Rules 
into CPCM Rights Holder Descriptor 
via CI; Controlling re-encryption using 
CPCM Tools in Tool Box for storage; 
Forming CPCM Stream. 



normative 



Optional for 
CPCM Devices; 
Used for 
backward 
Compatibility for 
private CAS; 



All Types of 
M essage Format 

AS Shown in me Table 7, except the iast module, all other five modules 
including their functions and behaviors, are needed to be normative and 
standardized to provide woridwide interoperability. 

The message format fromfto Message Routers between CPCM devices and 
proprietary CPCM tools (plug-ins) will be nonnative, and it is used for Content 
transferring. Tool transfening, mutual authentication between CPCM devices, 
as well as interfacing v»ith CPCM plug-ins, 

interfaces between different modules inside a Baseline DVB-CPCM are not 
defined here, and it is implementation matter. Even the interface between 
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Baseline DVB-CPCM and DVB STB is also not defined here as long as 
Baseline DVB-CPCM fulfils all the functions that are defined here. 
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CLAIMS 

1 An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting for 
Content Protection and Copy Management) on sender side used in a complete 
5 business environment, said apparatus distributing a CPCM protected content in 
which content protection and copy management (CPCM) information for CPCM 
is attached to an encrypted content stream, said apparatus comprising: 

means for generating said encrypted content stream on the 
1 0 content owner side or operator side; 

means for generating said CPCM information which specifies an 
authorized domain which is authorized to perform one of reproduction and copy 
of said CPCM protected content; 



15 



20 



25 



means for generating said CPCM protected content by attaching 
said CPCM information to said encrypted content stream; and 

means for delivering said CPCM protected content. 



2. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting for 
Content Protection and Copy Management) on receiver side, comprising: 

means for receiving a CPCM protected content stream with its 
CPCM information and CPCM stream in CPCM device, said CPCM information 
specifying an authorized domain which is authorized to perform one of 
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reproduction and copy of said CPCM protected content; 

means for retrieving said CPCM information by said CPCM device 
to verify against pre-registered information in a Baseline DVB of said CPCM 
5 device to see whether said CPCM device is in an authorized domain; 

means for retrieving said CPCM information by said CPCM device 
to decrypt said encrypted content stream; 

10 means for storing the content in a protected form in said CPCM 

device; and 

means for transferring the CPCM protected content from isaid 
CPCM device to another complaint CPCM device in a secure manner, after 
1 5 authenticating they are belong to the same authorized domain. 

3. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting 

for Content Protection and Copy Management) used for end-to-end solution on 
20 sender side, comprising: 

means for generating a CPCM protected content stream on the 
content owner side or operator side; 

25 means for forming a Tool List as CPCM Tool List to list all the tools used 

to protecting said content by using a tool ID code to be assigned to any tool 
used for protecting said content Including such as encryption, watermarking 
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embedding, watermarking detecting, digital signing; 

means for creating CPCM Rights Holder by including usage rules, copy 
rights, etc. which is related to said content in a specific format; 

means for creating a CPCM Control Graph to tell a protection sequence 
using different tools in different position; 

means for creating a CPCM Tool Container to carry a CPCM tool with 
10 certain CPCM Tool ID; 

means for forming a CPCM Stream to carry key information, control 
information, and time stamp information which are related to those information 
of using said tools to protect said content; 



15 



20 



25 



means 



for placing said CPCM information including CPCM Tool List. 
CPCM Rights Holder. CPCM Control Graph. CPCM Tool Container, as well as 
CPCM Stream in the system layer .n the specified location and specified format, 
together with said CPCM protected content stream; 

means for assigning Content ID as content identifier for content 
management on both operator side and user side; and 

means for delivering said CPCM protected content with its said CPCM 
information to CPCM device in a secure manner, said CPCM device belonging 
to said authorized domain set by specifying CPCM_DomainID as CPCM 
Domain Identifier for authorized domain management. 
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4. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting 

for Content Protection and Copy Management) on receiver side, comprising: 

5 

means for receiving a transmitted content by a CPCM device; 

means for authorizing said CPCM device to see whetiier it belongs to 
said autltorized domain; 

10 

means for retrieving said CPCM information included in said transmitted 
content by said CPCM device to obtain said protection information; 

means for verifying said usage rules of content by said CPCM device 
15 before taking action on user's request; 

means for decrypting said CPCM protected content using said retrieved 
CPCM information by calling up CPCM tools from said CPCM device or a 
proprietary CPCM Plug-in module if the requested CPCM tool is missing in said 
20 CPCM device; 

means for playing back said decrypted content to said user; and 

means for storing the CPCM protected content with its CPCM information 
25 in said CPCM device if said user has such request. 
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5. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting 

for Content Protection and Copy IVlanagement) used for content transfen-ing 
between devices, comprising: 

5 means for setting a set of messages for content transferring witli the data 

structure for several parameters used for content transferring; 

means for receiving a Content Request Message which is sent with 
several defined parameters by CPCM device B to request a content transferring 
1 0 from CPCM device A; 

means for verifying said several parameters received by said CPCM 
device A with the data pre-saved in said CPCM device A which is CPCM 
information specifying an authorized domain which is authorized to perform one 
15 of reproduction and copy of said CPCM protected content, to authenticate 
whether said CPCM device A and B are in the same domain, whether the 
requested content is in said CPCM device A, whether there is such copy/move 
rights attached to said content; 

20 means for sending a Content Response Message with several reply 

messages for different cases by said CPCM device to said CPCM device B. 
after the above said verification; and 

means for sending the requested content from said CPCM device A 
25 together with its CPCM information to said CPCM device B in a secure manner 
if the above said reply is positive. 
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6. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting for 
Content Protection and Copy Management) used for CPCM tool transferring, 
comprising: 

5 

means for setting a set of messages for tool transferring with the data 
structure for several parameters used for tool transferring; 

means for sending a Tool Request Message with several defined 
10 parameters by CPCM device B to request a tool transferring from CPCM device 
A; 

means for verifying said several parameters received by said GPCM 
device A with the data pre-saved in said CPCM device A which is CPCM 
15 information specifying an authorized domain which is authorized to perform one 
of reproduction and copy of said CPCM protected content, to authenticate 
whether said CPCM device A and B are in the same domain, whether the 
requested tool is in said CPCM device A, whether the requested tool is allowed 
to transfer to another CPCM device; 
,20 . _ ^ ................... - 

means for sending a Tool Response Message with several reply 
messages for different cases by said CPCM device to said CPCM device B, 
after the above said verification; and 

25 means for sending the requested toot from said CPCM device A together 

with its status for transferring to said CPCM device B in a secure manner if the 
above said reply is positive, 
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wherein said CPMP device B retrieves said CPCM tool from other 
sources if the above said reply is negative. 

7. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting for 
Content Protection and Copy Management) comprising: 

CPCM Manager module for the Baseline DVB-CPCM. to retrieve CPCM 
information that is placed in a system layer of a received content stream, and to 
process said CPCM Too Ust information and retrieve CPCM tools indicated by 
ToollD in said CPCM Tool List; 

Rights Management module for the Baseline DVB-CPCM, to retrieve 
said CPCM Rights Holder information for domain authentication, usage rules 
verification, and session key delivery if it is necessary; 

Tools Box module for the Baseline DVB-CPCM, to hold the possible 
defined CPCM tools or tools transferred and retrieved from other sources, and 
to activate the requested tool for performing its function; 

Message Router module for the Baseline DVB-CPCM, to use for 
message interface for sending and receiving message between CPCM devices, 
especially for communication between a compliant CPCM device and a 
proprietary CPCM Plug-in module; 
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CAS-CPCM Converter module for the Baseline DVB-CPCM, to use for 
converting usage rules set by an existing CA (Conditional System) system 
across the DVB compliant common interface (CI) for backward compatibility; 

5 Key Generator module for the Baseline DVB-CPCM, to generate a pair of 

keys for secure content transferring. 



8. An apparatus of a Baseline DVB-CPCM for generating a protected 

10 content stream on the content owner side or operator side in claim 3, further 
comprising: 

means for embedding copy control information in a content using 
said CPCM tools, such as watermarking, if there is such requirement; 

15 

means for encoding a content based on existing formats such as 
MPEG-2 using encoding tools, to form a content stream; 



means for encrypting said content stream using said CPCM tool to 
20 form a protected content. 

9. An apparatus of a Baseline DVB-CPCM for generating content 

protection and copy management (CPCM) control information and generating 
25 content protection and copy management (CPCM) stream in claim 1, 
comprising: 
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to protecting said «..ent W using a .00, ,0 Oden««er, to be assigned to any 
too, used for protecting said content induding such as encryption, >«aten.arK,ng 
embedding, watermarking detecting, digital signing; 

' neans for creating CPCM Rights Holder by including usage rules, copy 

Hghts, etc. which is related to said content In a specific fom,at; 

.eans for creating a CPCM Con.™. Graph to tell a protection sequence 
1 0 using different tools in different position; 

.aans for creaUng a CPCM Tool Container to carry a CPCM tool with 
certain CPCM Tool ID; 

means for fonnlng a CPCM Stream .0 carry key intormatlon, co,*ol 
infonnation, and time stamp infon^ation which are related to those informa.,on 
of using said tools to protect said content. 
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,0 An apparatus of a Baseline DVB-CPCM for sending a Content 

Ke,uest Mess^e ^th severe. de«ned parameters by a CPCM device B to 
.ecuest a tool transferring from anomer CPCM device A in da^ 5, f *er 
composing means for sending a Content Request Message with the ContentlD 
^r L requested «»,tent, the CPCM.DomalnlO for domain au«^«caUc., and 
the PuWicKey for using to encrypt encryption key. 
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11. An apparatus of a Baseline DVB-CPCM for sending a Tool Request 
Message with several defined parameters by a CPCM device B to request a 
tool transferring from another CPCM device A in claim 6, further comprising 
means for sending a Tool Request Message with the ToollD for the requested 
5 tool, the CPCM_DomainlD for domain authentication, and the PublicKey for 
using to encrypt said tool. 



12. An apparatus of a Baseline DVB-CPCM for retrieving said CPCM tool 
10 from other sources if the above said reply Is negative in claim 6, further 
comprising means for downloading from said other sources via a return channel, 
a defined URL, or other means in a secure manner. 

15 13. An apparatus of a Baseline DVB-CPCM for sending a Content 

Request Message and sending Tool Request Message in claims 5 or 6. further 
comprising: 

means for using a defined CPCM_DevicelD as CPCM Device Identifier 
20 for its CPCM devices within the same authorized domain; 

means for using said CPCM_DevicelD to send a message to a CPCM 
device that has said CPCM_DevicelD, and at the same time using another 
CPCM_DevicelD for the message sender's address. 
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